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WHAT IS CLAIMED IS: 

1 1 . A method of accessing an electronic file, comprising: 

2 querying a license server associated with an encrypted version of the 

3 electronic file in response to a read access request to the electronic file; 

4 issuing a token from said license server according to an access pohcy 

5 when access to the electronic file is authorized; and 

6 decrypting said encrypted version of said electronic file to a volatile 

7 memory using said token to produce the electronic file. 

1 2. The accessing method of claim 1 , further comprising: 

2 hmiting, after said decrypting step, access by all unauthorized processes to 

3 said volatile memory. 

1 3. The accessing method of claim 1, further comprising: 

2 inhibiting, after said decrypting step, transfer of the elecfronic file to a 

3 nonvolatile memory. 

1 4. The accessing method of claim 1 wherein said querying step 

2 includes extracting a key from said encrypted version of the electronic file and using said 

3 key to access said license server. 

1 5. The accessing method of claim 1 wherein said access poUcy limits 

2 a number of processes that concurrently access the electronic file in said volatile memory. 

1 6. The accessing method of claim 1 wherein said access policy limits 

2 a number of operations on the electronic file in said volatile memory. 

1 7. The accessing method of claim 1 wherein said access policy 

2 selectively enables decryption of a portion of the electronic file. 

1 8. The accessing method of claim 1 wherein said decrypting step 

2 decrypts a portion of the file at any time and overwrites successive portions on top of 

3 previously decrypted portions. 
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1 9. The accessing method of claim 1 wherein decrypting step includes 

2 both a cryptological function and a tokenization and transformation function. 

1 10. The accessing method of claim 1 wherein said read request is 

2 issued from an access program. 

1 11. The accessing method of claim 10 wherein said access program is 

2 an interpreted program translator and the electronic file is source for said interpreted 

3 program translator. 

1 12. The accessing method of claim 1 wherein said access policy 

2 provides for third party access control. 

1 13. The accessing method of claim 1 wherein said license server is a 

2 local file. 

1 14. The accessing method of claim 1 wherein said license server is a 

2 remote file not available on a computing system storing the encrypted electronic file. 

1 15. The accessing method of claim 1 wherein said license server is 

2 coupled to the electronic file. 

1 1 6. A method of producing an electronic file having embedded access 

2 control, comprising: 

3 encrypting the electronic file with a first key to produce an encrypted 

4 electronic file; and 

5 associating said encrypted electronic file with an access executable and a 

6 license server having an access policy for the electronic file, both operable on a 

7 computing system, said license server responsive to an access request firom said access 

8 executable to issue a first token to said access executable according to said first key and 

9 said access policy, and said access executable responsive to said first token to decrypt 
10 said encrypted electronic file into a volatile memory protected by said access executable. 

1 17. The producing method of claim 16 wherein encrypting step 

2 includes both a cryptological function and a tokenization and transformation function. 
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1 18. A method of providing access to a process executing on a 

2 computing system of an encrypted electronic file containing a plain electronic file, 

3 comprising: 

4 issuing an access instruction from the process to access the plain electronic 

5 file; 

6 querying a license server associated with the encrypted electronic file in 

7 response to said access instruction; 

8 issuing a token firom said license server according to an access policy 

9 when access to the plain electronic file is authorized, said token containing access 

10 authorization instructions; 

1 1 decrypting so much of the encrypted electronic file to a volatile memory as 

12 authorized by said access authorization instructions to write all or a portion of the plain 

13 electronic file into said volatile memory; and 

14 providing controlled access of said portion of the plain electronic file in 

1 5 said volatile memory to the process while inhibiting all other accesses to said volatile 

1 6 memory by other processes. 

1 19. A system for accessing an electronic file, comprising: 

2 means for querying a license server associated with an encrypted version 

3 of the electronic file in response to a read access request to the electronic file; 

4 means, coupled to said querying means, for issuing a token from said 

5 license server according to an access policy when access to the electronic file is 

6 authorized; and 

7 means, coupled to said issuing means, for decrypting said encrypted 

8 version of said electronic file to a volatile memory using said token to produce the 

9 electronic file. 

1 20. A system for producing an electronic file having embedded access 

2 control, comprising: 

3 means for encrypting the electronic file with a first key to produce an 

4 encrypted electronic file; and 

5 means, coupled to said encrypting means, for associating said encrypted 

6 electronic file with an access executable and a license server having an access policy for 
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7 the electronic file, both operable on a computing system, said license server responsive to 

8 an access request from said access executable to issue a first token to said access 

9 executable according to said first key and said access policy, and said access executable 

10 responsive to said first token to decrypt said encrypted electronic file into a volatile 

1 1 memory protected by said access executable. 

1 21 . A system for providing access to a process executing on a 

2 computing system of an encrypted electronic file containing a plain electronic file, 

3 comprising: 

4 means for issuing an access instruction from the process to access the plain 

5 electronic file; 

6 means, coupled to said access instruction issuing means, for querying a 

7 Hcense server associated with the encrypted electronic file in response to said access 
r=, 8 instruction; 

9 means, coupled to said querying means, for issuing a token from said 

10 license server according to an access pohcy when access to the plain electronic file is 

1 1 authorized, said token containing access authorization instructions; 

12 means, coupled to said token issuing means, for decrypting so much of the 

1 3 encrypted electronic file to a volatile memory as authorized by said access authorization 

1 4 instructions to write all or a portion of the plain electronic file into said volatile memory; 

15 and 

1 6 means, coupled to said decrypting means, for providing controlled access 

17 of said portion of the plain electronic file in said volatile memory to the process while 

1 8 inhibiting all other accesses to said volatile memory by other processes. 
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